This repository contains the Infrastructure as Code (IaC) configurations required to set up a highly available Dell Boomi Atom running on AWS ECS Fargate using Terraform. Additionally, it features a Python-based AWS Lambda function responsible for AWS Secrets Manager rotation.

This repo is configured for the intention of use for Coforma. If you intend to use it please fork it and make your own customizations.

• Fargate Task: Runs a single task that is allocated 1 vCPU and 2GB of memory. The task is responsible for running the Dell Boomi Atom.

• Lambda Function for Secrets Rotation: It rotates the secrets every 12 hours using the environment variables boomi_account_id, boomi_username, and boomi_auth_token. This ensures that the task can always pull a new version if an issue arises.

• VPC Configuration: The Boomi Atom operates inside a private VPC but can connect to the internet using dedicated egress rules routed through a NAT Gateway and an Internet Gateway (IGW) pair.

• Deploy Jar GHA Workflow: Make sure to run this if a new deployment goes out or a failover event. This can be updated to be more automated in the future.

list(object({
    from_port   = number
    to_port     = number
    description = string
    protocol    = string
    cidr_blocks = list(string)
  }))

[
  {
    "cidr_blocks": [
      "0.0.0.0/0"
    ],
    "description": "Unanet traffic",
    "from_port": 31001,
    "protocol": "tcp",
    "to_port": 31001
  }
]

[
  "10.1.0.0/27",
  "10.1.0.32/27"
]

[
  "10.1.0.64/27",
  "10.1.0.96/27"
]

No outputs.

1. Terraform/OpenTofu: Ensure that Terraform is installed and appropriately configured with your AWS credentials.

2. AWS Account: Necessary permissions to create and manage the mentioned AWS resources.

3. Python: Required for the AWS Lambda function. Ensure you have the AWS SDK for Python (Boto3) installed and requests.

4. terraform-docs: Tool used to generate terraform docs.

1. Clone the Repository:

   git clone <repository-url>
   cd <repository-name>

2. Ensure Python requirements are installed next to the lambda function

   pip3 install --target ./lambda/package boto3 requests

3. Initialize Terraform:

   terraform init

4. Apply Terraform Configurations: Before applying, always make sure to review the changes Terraform will perform.

   terraform plan
   terraform apply

5. Lambda Function Configuration: Ensure that the Lambda function has the three environment variables set:

   • boomi_account_id
   • boomi_username
   • boomi_auth_token

6. Monitoring: Monitor the task and lambda logs via AWS CloudWatch for any potential issues.

• Ensure that your AWS credentials are stored securely and are not exposed in any Terraform configurations.
• Make sure the Boomi credentials used in the Lambda environment variables are securely stored in AWS Secrets Manager or another secrets management tool.
• Ensure that the VPC egress and ingress rules are set appropriately to minimize any potential security risks.

If you'd like to contribute, please fork the repository and make changes as you'd like. Pull requests are warmly welcomed.

Before submitting a PR please make sure to run the following:

terraform fmt
terraform-docs markdown table --output-file README.md --output-mode inject --sort-by required .

This project is licensed under the MIT License. See the LICENSE file for details.